We have moved to a new Sailfish OS Forum. Please start new discussions there.
6

take reference on channels netns in kernel-ppp CVE-2016-4805 critical [released]

Tracked by Jolla (In release)

asked 2017-05-11 15:03:43 +0200

this post is marked as community wiki

This post is a wiki. Anyone with karma >75 is welcome to improve it.

updated 2017-05-11 15:03:43 +0200

lpr gravatar image

Description
Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions. CVSSv3:7.8 high (attack range: local)

Upstream Patch is available.

file affected: kernel-adaptation-sbj-3.4.108.20161101.1/drivers/net/ppp/ppp_generic.c lines 2177-2183; 2274-2279

edit retag flag offensive reopen delete

The question has been closed for the following reason "released in a software update" by lpr
close date 2017-07-24 21:06:32.057861

Comments

released in Jämsänjoki / 2.1.1.23

lpr ( 2017-07-24 21:06:17 +0200 )edit

1 Answer

Sort by » oldest newest most voted
1

answered 2017-06-01 01:03:37 +0200

IZh gravatar image

Already in devel.

edit flag offensive delete publish link more

Question tools

Follow
1 follower

Stats

Asked: 2017-05-11 15:03:43 +0200

Seen: 151 times

Last updated: Jun 01 '17